naveensrinivasan
|
dd737bd755
|
Pin actions to a full length commit SHA
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
>Pin actions to a full length commit SHA
>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.
https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
|
3 years ago |
Chris Lu
|
5f3784ee05
|
Update binaries_dev.yml
|
3 years ago |
Chris Lu
|
1dced26304
|
Update binaries_dev.yml
|
3 years ago |
Chris Lu
|
da1c755f6a
|
fix build issue
fix https://github.com/wangyoucao577/go-release-action/issues/66
|
3 years ago |
Chris Lu
|
791aa3cb44
|
update to wangyoucao577/go-release-action@v1.21
|
3 years ago |
Chris Lu
|
320a08f250
|
adjust go release action version
|
3 years ago |
Chris Lu
|
177129013c
|
releases in github actions disable http2client
|
3 years ago |
Chris Lu
|
4d388b9782
|
Update binaries_dev.yml
|
3 years ago |
Chris Lu
|
5eb905a5d1
|
Update binaries_dev.yml
|
3 years ago |
Chris Lu
|
79a1903021
|
Update binaries_dev.yml
|
3 years ago |
Jay Zhang
|
12d9108bb4
|
chore: disable http2 in go-release-action
|
3 years ago |
Chris Lu
|
b0b2a03ea7
|
Update binaries_dev.yml
|
3 years ago |
Chris Lu
|
641ce36f6f
|
Update binaries_dev.yml
|
3 years ago |
Chris Lu
|
12e6692dac
|
trying wangyoucao577/go-release-action@bugfix/upload-fail
following https://github.com/wangyoucao577/go-release-action/issues/63#issuecomment-962417798
|
3 years ago |
Chris Lu
|
5296c397f4
|
build latest container
|
3 years ago |
Chris Lu
|
0a7e532fb2
|
Update binaries_dev.yml
|
3 years ago |
Chris Lu
|
94700d65ba
|
serialize building dev binaries
|
3 years ago |
Chris Lu
|
84d2e1bdd0
|
fix container building, make it same as rocksdb image
|
3 years ago |
Chris Lu
|
4800d0ce26
|
separate into multiple actions
|
3 years ago |
Chris Lu
|
bde2fc65b0
|
separate into multiple jobs for better execution
|
3 years ago |
Chris Lu
|
0c12a7d12a
|
github action build rocksdb image
|
3 years ago |
Chris Lu
|
adfd79e243
|
skip arm platform
|
3 years ago |
Chris Lu
|
eab7cf4bd3
|
restore dev binaries building
|
3 years ago |
Chris Lu
|
a0a6aa36fa
|
adjust name
|
3 years ago |
Chris Lu
|
85a2046411
|
move out latest container building
|
3 years ago |
Chris Lu
|
9ca7c322b4
|
reduce resource usage
|
3 years ago |
Chris Lu
|
2954bd71f8
|
testing different binary name
|
3 years ago |
Chris Lu
|
ce9e606eb2
|
fix waiting, binary name.
|
3 years ago |
Chris Lu
|
ee143f9ae0
|
github action adds dependencies
|
3 years ago |
Chris Lu
|
5035b0a109
|
build binaries on release
|
3 years ago |
Chris Lu
|
a443e39def
|
add back delays
|
3 years ago |
Chris Lu
|
64971b0d7e
|
merge into one action
|
3 years ago |
Chris Lu
|
68b23114b9
|
adjust actions
|
3 years ago |
Chris Lu
|
0c47437ece
|
Revert "action: delete previous assets"
This reverts commit 9ec151fa0d .
|
3 years ago |
Chris Lu
|
9ec151fa0d
|
action: delete previous assets
|
3 years ago |
Chris Lu
|
d5c7dbac4a
|
docker: build dev containers
|
3 years ago |
Chris Lu
|
d869a07cd2
|
clean up
|
3 years ago |
Chris Lu
|
705285ec60
|
rename file
|
3 years ago |
Chris Lu
|
f2de7910fc
|
move latest image build to after binary released
|
3 years ago |
Chris Lu
|
ae98a085d3
|
automated latest image build
|
3 years ago |
Alexander
|
aeda4be42c
|
fix(ci): use cleaner naming for jobs
|
3 years ago |
Alexander
|
7cfaa1a365
|
fix(ci): further testing of CI logic
|
3 years ago |
Alexander
|
bfb66b88b1
|
fix(ci): do not run on mainline branch
|
3 years ago |
Alexander
|
16f0cdc1bf
|
fix(ci): never try to push on test pull request
|
3 years ago |
Alexander
|
b686e8c45b
|
fix(ci): update latest to only run once
|
3 years ago |
Alexander
|
4128c1126a
|
fix(ci): upload all arches to Docker Hub once
|
3 years ago |
Chris Lu
|
ff70ba51ac
|
build with latest go version
|
3 years ago |
Alexander
|
7b56a6400d
|
fix(ci): use matrix for all container runs
|
3 years ago |
Alexander
|
b1331ba3fe
|
feature(ci): use matrix for container build
|
3 years ago |
Alexander
|
6850252e7c
|
revert(ci): remove continue-on-error
|
3 years ago |